TalkPress

Mullenweg says he’ll use the new cash to fund more projects, including a new forums product. Called TalkPress, he said it will be “smaller, lighter, with fewer features but a richer customization API.”

In other words, it will work a lot like WordPress, which is a basic framework upon which users add the features they really need. Mullenweg some time ago created a forum program, BBPress, and the TalkPress service will be built on that.

“I spend a lot of time on forums, and they drive me crazy,” he said. “They haven’t changed in 10 years.”

This topic is old – bbPress has not been hacked – there was an exploit for all of a day or two back in 0.8 that was quickly fixed.

What’s happening is that OTHER programs on the same account or server are being hacked and what they do is attach themselves to the bbPress templates though those other programs.

In over 4000 sites, I’ve only detected 8 XSS hacks so it’s obviously coming in through other programs and not directly (or the problem would be far more widespread).

(And by the way, if you keep getting hacked, that means your server has been compromised and need to be wiped and re-configured. Just re-installing the PHP programs won’t fix the issue if there is a a hidden backdoor elsewhere. )